Rely on Path Based Testing

Exercise the Logical Conditions in a Program module

Select Test Paths based on the locations and uses of variables

Focus on Testing the Validity of loop constructs

Rely on Path Based Testing

Exercise the Logical Conditions in a Program module

Select Test Paths based on the locations and uses of variables

Focus on Testing the Validity of loop constructs

Incorrect or Missing functions

Interface Errors

Performance Errors

All of the Above

None of the Above

Conventional Software Testing

Operations and classes that are Critical or Suspect

Use-Case Validation

White-Box Testing of Operator Algorithms

Boundary Value Analysis

Error Guessing

Equivalence Partitioning

Both B and C

Observability

Simplicity

Stability

All of the Above

Statement Coverage

Path Coverage

Branch Coverage

None of the Above

Authentication

Authorization

Integrity

Availability

Confidentiality

True

False

CREATE

UNION

WHERE

OR

Website with URL https

Website with URL http

Windows application

Only Website with URL http & Windows application

Buffer overflows

SQL Injection

Cross site scripting

Authentication

Authorization

True

False

File Name

File Type

Size

Virus Scanning

True

False

Denial of service

Executing malicious content

Information disclosure

All of the above

Windows authentication

SQL authentication

Form based authentication

Basic authentication

Passport authentication

All of the above

SqlDataAdapter myCommand = new SqlDataAdapter( "SELECT CustomerName, Email, PhoneNo FROM users WHERE cust_id = '" + txtuser.Text + "'", myConnection);

CREATE PROCEDURE procGetUser @custId VARCHAR(5) AS SELECT CustomerName, Email, PhoneNo FROM Customers WHERE cust_id = @custId

SqlDataAdapter myDataAdapter = new SqlDataAdapter("SELECT CustomerName, Email, PhoneNo FROM Customers WHERE cust_id = @cust_id", connection); myCommand.SelectCommand.Parameters.Add("@cust_id", SqlDbType.VarChar,

All the above

Provide highest privilege

Encode all client supplied data

Use of parameterized stored procedure

Providing detailed error message

SQL Injection

Cross Site Scripting

Authentication

Forceful browsing